KNIME Business Hub cross-site request forgery vulnerability

Versions prior to KNIME Business Hub 1.19.0 contain a cross-site request forgery vulnerability. This flaw stems from inadequate protection against such attacks, potentially allowing authenticated attackers to execute cross-site request forgery attacks via passive user interactions, thereby alteri...

PT-2026-110888

Name of the Vulnerable Software and Affected Versions Temporal Server affected versions not specified Description An issue exists where internal completion callbacks are not bound to the namespace that attached them. This allows an authenticated caller with write permissions in one namespace to...

PT-2026-82870

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

EUVD-2022-3007

Malicious code in bioql PyPI...

Integer Overflow in Endian Library

Lines of code Vulnerability details Impact An integer overflow can lead to unexpected behavior in a smart contract, potentially causing financial loss or disruption of the contract's intended functionality. Proof of Concept If the input value passed to the function exceeds 64 bits, an integer...

CVE-2022-36061

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

CVE-2022-36061 Elrond go can execute on same context checks in VM

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

CVE-2022-36061

CVE-2022-36061 (Elrond-go) affects the Go implementation of the Elrond Network. In versions prior to 1.3.35, read‑only contract calls can produce smart contract results and alter the state of the callee (contract B) as if the call were not read‑only. This violates read‑only semantics and can caus...

CVE-2022-36061: Improper Initialization

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

CVE-2020-9823

This issue was addressed with improved checks. This issue is fixed in iOS 13.5 and iPadOS 13.5. Users removed from an iMessage conversation may still be able to alter state...

CVE-2020-9823: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in iOS 13.5 and iPadOS 13.5. Users removed from an iMessage conversation may still be able to alter state...

CVE-2020-3844: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from an iMessage conversation may still be able to alter state...

PT-2020-17737

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 Description The issue allows users removed from an iMessage conversation to potentially alter state. This is due to inadequate checks that have been improved in the fixed versions...

CVE-2019-8659

This issue was addressed with improved checks. This issue is fixed in watchOS 5.3. Users removed from an iMessage conversation may still be able to alter state...

CVE-2019-8659

This issue was addressed with improved checks. This issue is fixed in watchOS 5.3. Users removed from an iMessage conversation may still be able to alter state...

PT-2019-19139

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.3 Description This issue allows users removed from an iMessage conversation to potentially alter state. The estimated number of potentially affected devices worldwide is not specified. There is no information about...

CVE-2019-8659: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in watchOS 5.3. Users removed from an iMessage conversation may still be able to alter state...

About the security content of tvOS 11.2.1

About the security content of tvOS 11.2.1 This document describes the security content of tvOS 11.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...